Vulnerability Details CVE-2022-40494
NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.149
EPSS Ranking 94.3%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-40494
-
cpe:2.3:a:ehang-io:nps:0.19.0
-
cpe:2.3:a:ehang-io:nps:0.19.1
-
cpe:2.3:a:ehang-io:nps:0.19.2
-
cpe:2.3:a:ehang-io:nps:0.20.0
-
cpe:2.3:a:ehang-io:nps:0.20.1
-
cpe:2.3:a:ehang-io:nps:0.20.2
-
cpe:2.3:a:ehang-io:nps:0.21.0
-
cpe:2.3:a:ehang-io:nps:0.21.1
-
cpe:2.3:a:ehang-io:nps:0.21.2
-
cpe:2.3:a:ehang-io:nps:0.22.0
-
cpe:2.3:a:ehang-io:nps:0.22.1
-
cpe:2.3:a:ehang-io:nps:0.22.2
-
cpe:2.3:a:ehang-io:nps:0.22.3
-
cpe:2.3:a:ehang-io:nps:0.22.4
-
cpe:2.3:a:ehang-io:nps:0.22.5
-
cpe:2.3:a:ehang-io:nps:0.23.0
-
cpe:2.3:a:ehang-io:nps:0.23.1
-
cpe:2.3:a:ehang-io:nps:0.23.2
-
cpe:2.3:a:ehang-io:nps:0.24.0
-
cpe:2.3:a:ehang-io:nps:0.25.0
-
cpe:2.3:a:ehang-io:nps:0.25.1
-
cpe:2.3:a:ehang-io:nps:0.25.2
-
cpe:2.3:a:ehang-io:nps:0.25.3
-
cpe:2.3:a:ehang-io:nps:0.25.4
-
cpe:2.3:a:ehang-io:nps:0.26.0
-
cpe:2.3:a:ehang-io:nps:0.26.1
-
cpe:2.3:a:ehang-io:nps:0.26.10
-
cpe:2.3:a:ehang-io:nps:0.26.2
-
cpe:2.3:a:ehang-io:nps:0.26.3
-
cpe:2.3:a:ehang-io:nps:0.26.4
-
cpe:2.3:a:ehang-io:nps:0.26.5
-
cpe:2.3:a:ehang-io:nps:0.26.6
-
cpe:2.3:a:ehang-io:nps:0.26.7
-
cpe:2.3:a:ehang-io:nps:0.26.8
-
cpe:2.3:a:ehang-io:nps:0.26.9